$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4fb98992-a216-3f6d-9adf-e8be7318839a.roa File: 4fb98992-a216-3f6d-9adf-e8be7318839a.roa (raw, json) Hash identifier: Aq4uMvAwyiKvBFUEVr0Ry9L0aKdE/xpTp52bZSHIEX8= Subject key identifier: A3:CB:66:6A:E7:66:E5:17:EE:65:B8:7D:EC:DB:9A:0B:04:A4:6B:3B Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F43285848748B206C177607203EA87180 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4fb98992-a216-3f6d-9adf-e8be7318839a.roa Signing time: Mon 06 Jan 2025 14:00:52 +0000 ROA not before: Mon 06 Jan 2025 14:00:52 +0000 ROA not after: Sun 06 Apr 2025 13:00:52 +0000 asID: 11290 IP address blocks: 158.222.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:8b:20:6c:17:76:07:20:3e:a8:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 6 14:00:52 2025 GMT Not After : Apr 6 13:00:52 2025 GMT Subject: CN=1a7af58f-b3c1-46e0-b09b-ab2de5e1b1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e1:4a:48:6f:c5:58:14:7d:ef:ec:15:32:25: dc:33:e2:35:91:43:eb:3d:44:54:4a:d8:db:bf:93: 16:46:4b:da:64:34:19:31:b6:bd:26:f8:08:e9:64: bf:c6:e6:bd:64:88:b6:13:0c:e7:44:bc:ac:5a:93: 4f:b6:27:42:26:ee:cb:0d:4e:bf:a5:41:68:d8:64: 9d:cf:3b:a3:7a:49:03:07:98:e3:15:48:19:7c:03: 41:ad:2f:b6:31:c8:ad:c0:7a:b6:aa:3f:01:46:56: 78:8b:3b:86:f7:72:8e:60:5d:df:f0:b1:7b:83:f4: 17:20:d0:27:6b:b1:fc:b2:2c:cd:25:6f:1c:e6:63: ac:12:af:76:8a:d7:76:04:4a:b0:91:42:85:10:18: df:95:4f:d2:c6:ed:f7:b6:1c:8d:7b:5a:87:b6:18: 43:a9:66:b5:2e:e7:be:5a:e3:2d:f7:ee:85:c2:dd: d6:53:10:45:a9:f2:12:98:7a:c4:81:22:72:79:68: 99:cb:29:dc:a1:89:c8:86:35:45:fa:8c:23:aa:2a: 9b:aa:60:2e:49:f2:34:3e:5b:9e:1c:31:0e:c8:93: 32:84:4a:89:52:b7:c3:0e:9d:26:1b:7c:e7:e7:04: 56:e3:95:5b:e1:d6:67:1c:30:a4:f0:17:04:0a:64: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CB:66:6A:E7:66:E5:17:EE:65:B8:7D:EC:DB:9A:0B:04:A4:6B:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4fb98992-a216-3f6d-9adf-e8be7318839a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 158.222.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:30:88:c3:9c:29:37:ce:5f:8f:44:55:92:4e:50:8b:3f:78: 2a:ca:b3:7d:32:91:f1:21:0d:09:4b:0e:67:7b:09:83:98:d8: 34:a7:0f:17:4c:42:67:eb:f7:3d:2a:70:59:12:15:f5:f3:6d: 2d:65:64:48:a8:89:0a:fe:83:69:a9:4c:06:87:06:03:09:ca: a4:4d:c1:73:3e:b2:f0:69:4d:54:3c:ea:b0:69:1c:bc:bf:23: 48:84:19:42:cd:05:e3:b1:ad:87:7c:d1:6f:e7:91:37:68:0e: 87:fe:5e:f6:09:52:8c:6c:01:28:ed:8f:cc:61:48:86:8d:5c: 61:9b:b9:e6:47:0d:07:9b:04:ee:71:13:0c:f6:8f:49:23:0b: da:28:4a:9d:74:dc:04:f8:c0:d4:8a:6e:e5:3c:f4:d2:20:85: c3:b4:80:61:c9:29:6d:cf:f5:ef:78:3a:e5:5f:71:7f:96:1b: 67:72:47:37:25:7b:e0:3f:0e:bc:08:f1:5c:7f:45:bd:58:7f: a9:d2:81:56:68:94:b7:e5:79:7a:55:7f:09:ac:b4:0c:66:8b: 38:6b:34:1b:bb:8b:72:f5:77:bc:7a:7f:15:28:d4:79:e8:5e: 37:3c:2a:ef:74:b0:3b:ee:ba:62:4f:79:c6:2c:bf:cb:be:45: c3:f5:e0:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0iyBsF3YHID6ocYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk MWE3YWY1OGYtYjNjMS00NmUwLWIwOWItYWIyZGU1ZTFiMWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieFKSG/FWBR97+wVMiXcM+I1kUPrPURUStjb v5MWRkvaZDQZMba9JvgI6WS/xua9ZIi2EwznRLysWpNPtidCJu7LDU6/pUFo2GSd zzujekkDB5jjFUgZfANBrS+2McitwHq2qj8BRlZ4izuG93KOYF3f8LF7g/QXINAn a7H8sizNJW8c5mOsEq92itd2BEqwkUKFEBjflU/Sxu33thyNe1qHthhDqWa1Lue+ WuMt9+6Fwt3WUxBFqfISmHrEgSJyeWiZyyncoYnIhjVF+owjqiqbqmAuSfI0Plue HDEOyJMyhEqJUrfDDp0mG3zn5wRW45Vb4dZnHDCk8BcECmRXxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPLZmrnZuUX7mW4fezbmgsEpGs7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNGZiOTg5OTItYTIxNi0z ZjZkLTlhZGYtZThiZTczMTg4MzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnt5oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkwiMOcKTfOX49EVZJOUIs/eCrKs30ykfEhDQlLDmd7CYOY2DSnDxdM Qmfr9z0qcFkSFfXzbS1lZEioiQr+g2mpTAaHBgMJyqRNwXM+svBpTVQ86rBpHLy/ I0iEGULNBeOxrYd80W/nkTdoDof+XvYJUoxsASjtj8xhSIaNXGGbueZHDQebBO5x Ewz2j0kjC9ooSp103AT4wNSKbuU89NIghcO0gGHJKW3P9e94OuVfcX+WG2dyRzcl e+A/DrwI8Vx/Rb1Yf6nSgVZolLfleXpVfwmstAxmizhrNBu7i3L1d7x6fxUo1Hno Xjc8Ku90sDvuumJPecYsv8u+RcP14P4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:19 2025 by rpki-client